RE: multihoming issues via SCTP

["Christian Huitema" <huitema@windows.microsoft.com>]

> > I would rather look for a solution to ingress filtering that only
> > involves the site exit routers and the hosts. An example may be a
> mesh
> > of tunnels established between the exit routers, so that packets can
> be
> > redirected to the right exit.
> 
> And what if this exit happens to be down?
> 
> Wouldn't it be easier to just allow all addresses in all filters at
> all
> exits? Source address filtering is a means to an end, not an end in
> itself.

Yes, that is also a very good option. But you have to understand the
ramification, e.g. if source address filtering was to be performed
further up in the network.

-- Christian Huitema